NOTICE AND STATEMENT CONSENT TO COLLECTION, PROCESSING AND USE OF PERSONAL DATA
In accordance with the Law on Personal Data Protection, with this Notice (hereinafter: Notice) we provide natural persons with information regarding the processing of personal data (hereinafter: Person), and by signing the Statement based on this Notice, Persons give their consent to MANUAL workshop for making leather items using traditional methods and trade, Novi Sad, Patrijarha Pavla Boulevard 2, Republic of Serbia, ID: 50392384,
PIB: 102176125, in the capacity of Data Controller (hereinafter: Controller) processes personal data for the purpose of implementing the "My SpotLight" loyalty program through marketing activities, including direct marketing and profiling (hereinafter: Loyalty Program).
1. DATA MANAGER
The data controller is: MANUAL workshop for making leather items using traditional methods and trade, Novi Sad, boulevard patrijarha Pavla 2, Republic of Serbia, MB: 50392384, PIB: 102176125. The data collected from you will be used exclusively by the data controller and persons with whom the controller data has a data processing contract, exclusively for the purposes specified in this Notice.
2. CONTACT
According to all requests related to personal data, Persons may be processed to the Controller in one of the following ways:
Email: office@manual.rs
Postal address: Bulevar Patrijarha Pavla 2, Novi Sad, Republika Srbija
Phone: +381 69 207 0028
3. CATEGORIES OF PROCESSED PERSONAL DATA
Based on the Statement, the data manager collects, processes and uses the following categories of your personal data.
1. Name and surname
2. Telephone number
3. Email address
4. Place of residence
By entering data on the form. The person gives consent to the Controller to collect, process and use the entered data for the purposes determined by the Notice and Statement, in accordance with the Personal Data Protection Act. In addition to the above data, for the purpose of implementing the Loyalty Program, the Operator will collect, process and use all data on the Person's transactions in the Operator's retail stores (including data on the amount of transactions, the amount of transactions, the total amount of transactions, the type of goods/services that the Person purchases, benefits obtained and benefits used, etc.) that are recorded through the Loyalty Program card.
4. PURPOSE OF PROCESSING AND LEGAL BASIS OF PROCESSING
Personal data is processed on the basis of the Personal Data Protection Act, based on the consent of the Person (Article 12, paragraph 1, point 1), which the Person gives to the Controller by signing the Statement. Personal data is collected, processed and used for the purpose of:
1. Implementation of the Loyalty Program through marketing activities, including direct marketing and profiling.
2. Offering and providing services that correspond to the specific needs of the Person to whom the data refer, as well as in order to improve the relationship between the Person and the Data Controller.
Providing and processing personal data is a necessary condition for the implementation of the Loyalty Program, and the Person is obliged to provide personal data only if he wants to be included in the Loyalty Program. It is not possible to implement the Loyalty Program in case of non-provision of data, deletion of data, provision of incorrect data, as well as any other reason for termination of processing and use of this data. The data manager will not provide your personal data for use by other persons, unless he is obliged to do so by law and by a decision of the competent state authority. Personal data is used in all legally prescribed ways, which includes but is not limited to collection, recording, duplication, searching, classification, storage, separation, cross-referencing, storage, automatically, semi-automatically or otherwise.
5. PERIOD OF STORAGE OF PERSONAL DATA
The data manager will process personal data collected for the purpose of implementing the Loyalty Program as long as the implementation of the Loyalty Program lasts, i.e. as long as the Person to whom the data refers is involved in the implementation of the Loyalty Program, except in cases where the Data Manager is obliged to keep the data and after the end of the Loyalty Program in accordance with the laws regulating accounting.
Personal data processed exclusively on the basis of the consent of the person to whom the data refer are processed in accordance with the purpose for which they were collected, i.e. until the revocation of consent or withdrawal of consent by the person to whom the data refer or other cases of termination of the legal basis for processing personal data in accordance with the Law.
6. EXPORT OF DATA TO ANOTHER COUNTRY
The controller may transfer personal data to another country that is a member of the World European Convention on the Protection of Persons with regard to Automatic Processing of Personal Data, i.e. to a country that has been determined by the European Union to provide an adequate level of protection, in accordance with Article 64 of the Law on personal data protection.
7. THE RIGHTS OF PERSONS TO WHOM THE DATA RELATES IN CONTENT TO THE PROCESSING OF PERSONAL DATA
The person to whom the data refers has the right to access personal data processed by the Data Controller.
The person to whom the data refers has the right to request correction, updating, deletion of data, as well as interruption and temporary suspension of processing, in the manner prescribed by law. The person to whom the data refer has the right to submit an objection to the processing of personal data relating to him at any time. The person to whom the data refers has the right to portability of personal data, i.e. the right to receive the data that he previously submitted to the Data Controller, and to transfer it to another data controller, as well as the right to have his data directly transferred to another data controller by of the Data Controller, if it is technically feasible and if, in accordance with the Data Controller's assessment, the necessary standard of personal data transfer security is ensured. information about him is supplemented, including providing an additional statement, if it is necessary according to the purpose of the processing. The person to whom the data refers has the right to request from the Data Controller information on whether his data is being processed, access to the information, as well as the issuance of a copy of the data being processed. A copy is issued with the compensation of reasonable costs for making additional copies. The person to whom the data refers can at any time revoke the consent, i.e. withdraw his consent for data processing and request the deletion of his data, by means of a written statement sent to the Data Controller (as stated above), in which case the Data Controller will stop any further processing of the Data about the person and delete them from their own database, with the fact that, as a result of the aforementioned, the Person to whom the data refers is excluded from the Loyalty Program and will no longer have the rights and opportunities provided by the same. In case of unauthorized processing, the Person to whom the data refer has the right to delete the data.
8. RIGHT TO OBJECT
The person to whom the data refers has the right to object at any time to the processing of data about him that is processed for the purpose of direct marketing, including profiling, to the extent that it is related to direct marketing, in which case the data of the Person to whom the related data may not be further processed for the purpose of direct marketing.
9. RIGHT TO COMPLAINT
The person to whom the data refers has the right to lodge a complaint with the competent authority (Commissioner for Information of Public Importance and Protection of Personal Data, www.poverenik.rs) about the processing of his personal data by the Data Controller, if he considers that the processing of personal data to his person was carried out contrary to the provisions of the Law on Protection of Personal Data, in accordance with Article 82 of that Law. Filing a complaint to the Commissioner does not affect the right of this person to initiate other administrative or judicial protection procedures.
10. FREEDOM TO GIVE CONSENT AND POSSIBLE CONSEQUENCES OF NOT GIVING CONSENT TO THE PROCESSING OF PERSONAL DATA
Consent for data processing is voluntary and based on the free and unhindered will expressed by the Person to whom the data refer, by signing the Statement by hand.
11. EXISTENCE OF AUTOMATED DECISION-MAKING, INCLUDING PROFILING
As part of the implementation of the Loyalty Program, the Data Controller applies manual, semi-automated and automated decision-making techniques, including profiling, in order to offer and provide services that correspond to the specific needs of the Person to whom the data relates, as well as in order to achieve the greatest possible benefits (benefits) of the Person to which the data refer from participation in the Loyalty Program, which can bring special benefits (benefits) to that person, including financial ones (discounts, bonuses, gifts, etc.) that are important to the Person to whom the data refers in using the services, i.e. purchase of goods from the range of Controller. The operator undertakes appropriate organizational, technical and personnel measures to protect the confidentiality of the personal data of the person to whom the personal data refers, while applying standards in the field of ensuring physical and electronic data security. Personal data is treated by the Operator as confidential information.
(
sr